Which three statements describe the functionality of Dynamic Address Groups and tags? (Choose three.)

The correct answer is A. Static tags are part of the configuration on the firewall, while dynamic tags are part of the runtime B. Dynamic Address Groups that are referenced in Security policies must be committed on the C. To dynamically register tags, use either the XML API or the VM Monitoring agent on the firewall. Option A: Static tags are configured directly on objects. Dynamic tags are applied based on runtime conditions (e.g., by the VM Monitoring agent or User-ID agent). Option B: Like any configuration change that affects security policy, changes to DAGs (including tag associations)…

Policy and Object Management

Question

Options

AStatic tags are part of the configuration on the firewall, while dynamic tags are part of the runtime
BDynamic Address Groups that are referenced in Security policies must be committed on the
CTo dynamically register tags, use either the XML API or the VM Monitoring agent on the firewall
DIP-Tag registrations to Dynamic Address Groups must be committed on the firewall after each
EDynamic Address Groups use tags as filtering criteria to determine their members, and filters do

How the community answered

(51 responses)

A
80% (41)
D
14% (7)
E
6% (3)

Explanation

Option A: Static tags are configured directly on objects. Dynamic tags are applied based on runtime conditions (e.g., by the VM Monitoring agent or User-ID agent). Option B: Like any configuration change that affects security policy, changes to DAGs (including tag associations) must be committed to take effect. Option C: These are the mechanisms for dynamically applying tags based on events or

Topics

#Dynamic Address Groups#dynamic tags#XML API#VM Monitoring agent

Community Discussion

No community discussion yet for this question.

Full PSE-SWFW-PRO-24 Practice